Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/d57473-5b01-4f6d-8971-ab36f42190be/1/YD_oCeL10u60HZRqO69E3oR4Aa8.mft
File: YD_oCeL10u60HZRqO69E3oR4Aa8.mft (raw, json)
Hash identifier: MgQNHVMPBxj4tCyl+BU+JKC0a+kzACsUTNrrZMhAorQ=
Subject key identifier: D7:2C:09:82:BA:D8:24:9F:93:5F:3C:C7:EC:AE:C9:80:B4:F6:F8:D9
Authority key identifier: 60:3F:E8:09:E2:F5:D2:EE:B4:1D:94:6A:3B:AF:44:DE:84:78:01:AF
Certificate issuer: /CN=603fe809e2f5d2eeb41d946a3baf44de847801af
Certificate serial: 01A1DEA73608C9DB8F7C48D8B0595821F5B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YD_oCeL10u60HZRqO69E3oR4Aa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/d57473-5b01-4f6d-8971-ab36f42190be/1/YD_oCeL10u60HZRqO69E3oR4Aa8.mft
Manifest number: 67
Signing time: Sun 15 Nov 2026 10:01:02 +0000
Manifest this update: Sun 15 Nov 2026 10:01:02 +0000
Manifest next update: Mon 16 Nov 2026 10:01:02 +0000
Files and hashes: 1: YD_oCeL10u60HZRqO69E3oR4Aa8.crl (hash: wGDygTgSPKfHk6aSpk+TiLl0ki0GrOva1BOZDonyHHA=)
2: ZRETAiT7ebvgNtiSJSVlvKTo8a4.roa (hash: aJSLU4K5IZ9b8QL1t0pyCeKJKGjRfTQGSyk/63XFEe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/d57473-5b01-4f6d-8971-ab36f42190be/1/YD_oCeL10u60HZRqO69E3oR4Aa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/d57473-5b01-4f6d-8971-ab36f42190be/1/YD_oCeL10u60HZRqO69E3oR4Aa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YD_oCeL10u60HZRqO69E3oR4Aa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:a7:36:08:c9:db:8f:7c:48:d8:b0:59:58:21:f5:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=603fe809e2f5d2eeb41d946a3baf44de847801af
Validity
Not Before: Nov 15 10:01:02 2026 GMT
Not After : Nov 16 10:01:02 2026 GMT
Subject: CN=d72c0982bad8249f935f3cc7ecaec980b4f6f8d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b7:1e:40:1b:28:3b:60:a9:9b:cd:d5:a0:fd:
27:8b:04:17:84:c2:48:7a:79:b7:69:6d:a7:b1:87:
92:07:fd:cd:5e:3c:ce:00:75:5d:de:12:86:9e:ef:
24:84:0d:fc:9c:a2:24:71:1c:c6:52:c7:49:18:c0:
56:67:3e:0a:9b:8b:9e:d5:59:4a:94:5d:fb:0d:07:
d7:77:41:b0:5c:24:38:c4:15:69:aa:f8:2f:e4:86:
0d:07:30:de:31:d2:ad:97:6b:84:62:a3:f3:f8:16:
c3:88:e6:ac:9d:6f:0c:bb:0b:56:ca:1d:09:67:5c:
03:a0:dd:e6:ee:0f:ed:05:da:ea:88:19:0a:b8:f5:
98:ff:8a:76:f1:2b:15:6b:3e:1e:71:ba:39:fd:8a:
2a:aa:02:a9:59:47:d9:50:ab:e8:2d:56:38:e7:b4:
cb:96:91:6e:00:fd:81:d9:a5:b0:52:3e:de:b3:e5:
0e:38:02:dc:fb:98:47:77:7e:8f:f5:f4:73:0a:47:
55:76:a3:d9:78:4c:91:bb:33:ea:52:d0:d9:87:f0:
4e:38:42:ad:fe:b4:f7:10:19:e3:3c:bf:8a:bb:78:
a4:a4:1f:b2:5c:fe:0c:e0:d2:e7:c1:c6:07:a7:a6:
25:c7:e7:e4:f3:1e:ae:9a:f0:68:8c:5e:4a:24:26:
56:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:2C:09:82:BA:D8:24:9F:93:5F:3C:C7:EC:AE:C9:80:B4:F6:F8:D9
X509v3 Authority Key Identifier:
keyid:60:3F:E8:09:E2:F5:D2:EE:B4:1D:94:6A:3B:AF:44:DE:84:78:01:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YD_oCeL10u60HZRqO69E3oR4Aa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d57473-5b01-4f6d-8971-ab36f42190be/1/YD_oCeL10u60HZRqO69E3oR4Aa8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d57473-5b01-4f6d-8971-ab36f42190be/1/YD_oCeL10u60HZRqO69E3oR4Aa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:7c:ef:14:b9:22:06:ed:c6:e5:72:7f:65:5f:7f:10:18:0e:
37:b5:e5:95:bd:16:c5:c8:fd:04:5d:40:1c:76:84:f1:e8:b1:
c3:d2:93:f3:fe:b0:3f:5c:04:ef:86:df:9e:47:db:ec:43:f1:
ab:a2:34:40:57:6a:13:92:2a:b3:67:51:86:93:99:46:e8:9a:
cc:26:ca:03:c6:68:98:72:de:e7:50:e7:3e:fb:2c:00:a2:6c:
1d:0b:71:08:20:b9:b9:f6:03:ee:39:82:f5:4c:f3:e4:5a:b6:
3e:62:33:d0:48:8f:2e:f0:30:f8:39:3d:52:09:12:46:15:ad:
99:18:a0:b2:a5:1b:71:31:8c:70:f4:43:68:4f:9e:91:b3:d1:
83:ce:00:d9:18:23:4b:e0:63:3a:18:46:15:f3:a3:35:f2:4f:
93:be:15:e3:ff:3e:ec:7c:d7:7d:a4:b6:2b:27:6b:dc:8e:30:
90:d0:4d:9c:44:72:09:29:d6:37:2a:07:4d:0a:1b:0c:96:f4:
9b:94:44:1e:aa:9f:39:0b:71:a1:44:ba:8e:af:23:35:4f:98:
5b:20:39:ef:c5:58:e8:44:94:2f:31:5b:02:84:65:54:24:56:
63:7f:5c:44:01:18:e1:46:7c:db:8a:6e:69:17:5d:f5:1a:81:
13:38:0a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:45:41 2026 by rpki-client